From owner-freebsd-questions@FreeBSD.ORG Fri Apr 9 01:50:10 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7B1D316A4CE for ; Fri, 9 Apr 2004 01:50:10 -0700 (PDT) Received: from spam2.snu.ac.kr (spam2.snu.ac.kr [147.46.10.68]) by mx1.FreeBSD.org (Postfix) with SMTP id A73EB43D5F for ; Fri, 9 Apr 2004 01:50:09 -0700 (PDT) (envelope-from nospam@users.sourceforge.net) Received: (snipe 32638 invoked by alias); 9 Apr 2004 08:50:06 +0900(KST) Received: from nospam@users.sourceforge.net with SpamSniper2.76 (Processed in 0.044313 secs); Received: from unknown (HELO sis1.snu.ac.kr) (147.46.10.36) by 0 with SMTP; 9 Apr 2004 08:50:06 +0900(KST) X-RCPTTO: freebsd-questions@freebsd.org,arek@wup-katowice.pl, Received: from users.sourceforge.net (cisr.snu.ac.kr [147.46.44.181]) by sis1.snu.ac.kr (8.12.10/8.12.10) with ESMTP id i398k8dw282132; Fri, 9 Apr 2004 17:46:09 +0900 Message-ID: <407663BF.7020506@users.sourceforge.net> Date: Fri, 09 Apr 2004 17:50:07 +0900 From: Rob User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.6) Gecko/20040315 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Arek Czereszewski , freebsd-questions@freebsd.org References: In-Reply-To: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: Natd and natd_interface X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Apr 2004 08:50:10 -0000 Arek Czereszewski wrote: > Hi > > I have configuration like this: > > Intrenet - fxp0 (public IP) [freebsd box] - fxp1 (public IP) class /28 and > some workstatins connected, > mail daemon, www and others > - fxp1 alias 192.168.0.1/24 > and LAN > And now what interface in rc.conf must be natd_interface, fxp1 or fxp0? fxp0, the one that connects to the outside network. > Secend question is: > This rule for ipfw is OK for configuration what i have? > ipfw add 50 divert natd all from 192.168.0.0/24 to any via fxp1 I don't think you have to do this yourself. I believe by adding natd_enable="YES" to your rc.conf, you get the following rule as a result: divert 8668 ip from any to any via fxp0 which does what you want (I think). Rob.